Privacy Policy | CaptivateClick

This Privacy Policy describes how CaptivateClick (“CaptivateClick,” “we,” “us,” or “our”) handles personal data when you visit our website at captivateclick.com, contact us, subscribe to communications, or receive our digital marketing, web design, and AI automation services. It is written in plain language for our marketing site and is not legal advice.

If anything here is unclear, or you want to exercise your privacy rights, email us at team@captivateclick.com.

Who is responsible for your data

For the purposes of the EU General Data Protection Regulation (GDPR) and UK GDPR, the data controller is:

CaptivateClick, Inc. (trading as CaptivateClick)
Address: 1111B S Governors Ave STE 50889, Dover, DE 19904, US
Email: team@captivateclick.com
Phone: +46 73 077 76 71
Website: https://captivateclick.com

We have not appointed a Data Protection Officer. For privacy matters, contact us at the email above.

Scope of this policy

This policy applies to:

Visitors to captivateclick.com and related pages we operate.
Prospects and clients who inquire about, purchase, or use our services.
Individuals who communicate with us by email, forms, scheduling tools, or social channels.

It does not cover third-party websites or platforms we link to. Those services have their own privacy policies.

Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

Identity and contact details — name, email address, phone number, company name, job title, and the content of messages you send us.
Business and project information — goals, budgets, briefs, brand assets, analytics or ad account access (where you provide it), and other materials needed for proposals, campaigns, or service delivery.
Usage and technical data — IP address, browser type and version, device type, operating system, pages viewed, time on page, referral URL, and similar log or analytics data.
Communications and marketing preferences — whether you opted in to updates, how you interact with our emails, and records of consent where we collect it.
Contract and billing data — information needed to perform a contract, issue invoices, or meet tax and accounting requirements (where applicable).

We do not intentionally collect special categories of personal data (such as health or biometric data) unless you choose to share them and we have a clear lawful basis to process them for a specific service.

How we use personal data and our purposes

We use personal data to:

Respond to inquiries, schedule calls, and provide the services you request.
Prepare proposals, statements of work, and deliver client projects.
Operate, maintain, secure, and improve our website and internal business systems.
Send service-related messages and, where permitted, marketing about CaptivateClick (you can opt out of marketing at any time).
Understand site usage and measure the effectiveness of our own marketing.
Prevent fraud, abuse, and security incidents.
Comply with legal, regulatory, tax, and accounting obligations.
Establish, exercise, or defend legal claims where necessary.

Lawful bases for processing (GDPR Article 6)

We process personal data only when we have a valid legal basis. The bases we rely on most often include:

Contract (Art. 6(1)(b)) — when processing is necessary to take steps at your request before a contract, or to perform a contract with you or your organization.
Legitimate interests (Art. 6(1)(f)) — when we have a legitimate business need that is not overridden by your rights, such as improving our site, securing our systems, understanding aggregate usage, or pursuing business development with corporate contacts. You may object to this processing as described below.
Consent (Art. 6(1)(a)) — when you have given clear consent, for example for non-essential cookies or certain marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
Legal obligation (Art. 6(1)(c)) — when we must process data to comply with applicable law (for example, record-keeping for tax purposes).

Where we rely on legitimate interests, we balance those interests against your privacy rights. If you have questions about the basis for a specific activity, contact us.

Cookies and similar technologies

Our website uses cookies and similar technologies (such as local storage or pixels) to operate the site and remember preferences. With your consent, we also use them to measure traffic and understand how visitors use our pages.

Types of cookies we may use

Strictly necessary — required for core functionality, security, and load balancing. These do not require consent under ePrivacy rules where they are essential.
Preference — remember choices such as theme or language where those features are enabled.
Analytics and performance — help us measure traffic, marketing, and site performance. When you allow the analytics category, we load Google Tag Manager, Google Analytics 4 (GA4), and Meta Pixel. These tags and scripts stay off until you opt in through our cookie consent banner or manage panel.

We ask for your choice through a cookie consent banner on captivateclick.com. You can accept all cookies, reject non-essential cookies, or open the manage panel to turn analytics on or off. Your choice is stored in your browser (localStorage, key cc-cookie-consent) so we can honour it on return visits; that record is treated as strictly necessary for remembering your preferences. Analytics and measurement tools listed above load only after you consent to analytics (including when you update your choice in the manage panel). If we add or change analytics or advertising tools, we will update this policy and, where needed, ask for your consent again.

You can reopen cookie preferences anytime using the button below, through the consent banner when it is shown, your browser settings, or industry opt-out tools. Blocking cookies may affect how some parts of the site work.

Processors, subprocessors, and sharing

We do not sell your personal data. We share it only when needed to run our business, deliver services, or meet legal requirements.

Service providers (processors)

We use trusted third parties that process personal data on our instructions (“processors”). They may include providers for:

Website and application hosting.
Email delivery and transactional messaging.
Customer relationship management (CRM) and sales tooling.
Appointment scheduling and video conferencing.
Analytics, error monitoring, and performance measurement (when enabled).
Payment, invoicing, and accounting (where applicable).
Professional advisers (lawyers, accountants) under confidentiality duties.

We require processors to protect personal data through contracts that reflect GDPR requirements (including Article 28), limit use to our documented instructions, and apply appropriate security measures. Processors may use their own subprocessors; we expect them to impose equivalent obligations on those parties.

Other disclosures

We may also disclose personal data:

To comply with law, court order, or lawful request from public authorities.
To protect the rights, property, or safety of CaptivateClick, our clients, or others.
In connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.

International transfers

CaptivateClick, Inc. is incorporated in Delaware, United States. Personal data may be processed in the United States and other countries outside the EEA or UK. Where personal data is transferred to a country that has not received an adequacy decision from the European Commission, we rely on appropriate safeguards such as:

Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented where needed.
UK International Data Transfer Agreement or Addendum where UK GDPR applies.
Other mechanisms recognized under applicable data protection law.

You may request more information about transfers relevant to your data, or a copy of applicable safeguards, by contacting us.

How long we keep personal data

We retain personal data only for as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law. Typical retention depends on context:

Inquiries and marketing leads — for a reasonable period while we follow up, or until you ask us to delete your data or unsubscribe, unless we must keep records longer.
Active client relationships — for the duration of the contract and a period afterward to resolve disputes, enforce terms, and meet legal obligations.
Website logs and analytics — for limited periods aligned with our security and measurement needs, often aggregated or shortened where possible.
Legal and tax records — as required under applicable law (often several years for accounting documents).

When data is no longer needed, we delete it or anonymize it so it can no longer identify you, except where we must retain it in backup systems for a short time before automatic deletion.

Security

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Measures may include access controls, encryption in transit where supported, secure hosting environments, staff training, and vendor due diligence.

No method of transmission or storage is completely secure. If you believe your interaction with us is no longer secure, please notify us promptly at team@captivateclick.com.

Your rights under GDPR and UK GDPR

If you are in the European Economic Area, UK, or another jurisdiction with similar rights, you may have the following rights in relation to your personal data, subject to legal exceptions:

Right of access — request confirmation of whether we process your data and receive a copy.
Right to rectification — ask us to correct inaccurate or incomplete data.
Right to erasure — ask us to delete your data in certain circumstances (“right to be forgotten”).
Right to restrict processing — ask us to limit how we use your data in specific situations.
Right to data portability — receive data you provided to us in a structured, commonly used, machine-readable format, or have it transmitted to another controller where technically feasible and the processing is based on consent or contract.
Right to object — object to processing based on legitimate interests, including profiling related to direct marketing (we will stop unless we demonstrate compelling legitimate grounds).
Right to withdraw consent — where processing is based on consent, withdraw it at any time.
Rights related to automated decision-making — see the section below; we do not currently make decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise any of these rights, email team@captivateclick.com. We will respond within one month in most cases, as required by GDPR, and may extend that period for complex requests. We may need to verify your identity before acting on a request.

You also have the right to lodge a complaint with a supervisory authority. In Sweden, the authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). If you live in another EU or EEA country, you may contact your local data protection authority. UK residents may contact the Information Commissioner's Office (ICO). We encourage you to contact us first so we can try to resolve your concern.

Automated decision-making and profiling

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of GDPR Article 22. If that changes, we will update this policy and inform you where required.

Children

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from children under 16 (or the age defined by local law in your country). If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

Links to other websites

Our site may contain links to third-party websites, social networks, or client tools. We are not responsible for their privacy practices. Please review their policies before submitting personal data to them.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will post the updated policy on this page and revise the “Last updated” date above. Where required by law, we will provide additional notice or seek your consent.

Continued use of our website after an update means you acknowledge the revised policy, to the extent permitted by applicable law.

Contact us

For questions about this Privacy Policy, our use of personal data, or to exercise your privacy rights, contact CaptivateClick at team@captivateclick.com.

You can also reach us via our contact page for general inquiries.